Privacy & LGPD

Privacy Policy and LGPD compliance

Here is a clear look at the data we collect, how it powers our automations and the rights you can exercise any time.

Built for trust

LIA Flow powers conversational automation for small and mid-sized businesses. Safeguarding personal data is part of the product—from design reviews to quick responses when someone needs help.

Clear governance

Flows are designed with data minimization, documented consent and audit trails for each purpose.

Security layers

Encrypted storage, monitored cloud providers and role-based internal access keep every record protected.

Human support

Our team answers privacy, integration and deletion questions across dedicated channels.

Data collection

We only collect the information required to personalize conversations, provide support and meet legal or contractual duties.

Profile data shared through forms or chat: name, email, phone/WhatsApp, company and role.
Messages exchanged with LIA Flow, including attachments voluntarily submitted by the user.
Navigation data such as visited pages, conversion events and functional cookies for language or session continuity.

How we use the data

Each data point has a mapped purpose that supports automations and the human team behind them.

Run qualification flows, follow-ups and transactional notifications.
Send communications that were requested (booking confirmations, proposals, support updates) and relevant reminders.
Improve scripts and AI models with aggregated and anonymized learnings.
Sync conversations with tools already adopted by the customer (CRM, calendars, spreadsheets) with prior authorization.

Sharing with third parties

We only share data with essential partners under contract and strict security criteria.

Cloud infrastructure providers (such as AWS or GCP) host databases and logs.
External APIs, including Meta/WhatsApp and Google, enable messaging, calendar and authentication features.
Specialized auditors or monitoring tools may receive limited, time-bound access to resolve incidents.

Storage and security

Records remain active while there is an ongoing contract or another valid legal ground.

When the relationship ends we trigger automated clean-up procedures and share the timeline with the account owner.

Encryption at rest (AES-256) and in transit (TLS 1.2+) plus role-based access control.
Daily backups, geo-redundancy and integrity monitoring.
Default retention of up to 24 months for operational logs before anonymization or permanent deletion.

LGPD data subject rights

You can exercise all LGPD rights with LIA Flow. We acknowledge every request within five business days and keep you updated until completion.

Confirmation of processing and access to personal data.
Correction of incomplete, inaccurate or outdated records.
Anonymization, blocking or deletion of unnecessary data.
Portability to another provider whenever applicable.
Information about public authorities or private partners that receive the data.
Consent revocation and objection to specific uses.

Send your request through the form below or email liaflow.ai@gmail.com. We always validate the identity of the requester before executing the action.

Data deletion request form

Use the email connected to your interactions with LIA Flow and we will generate a formal deletion request automatically.